Re: [OpenAFS] Re: Moving Magic Trio to another domain

2013-09-23 Thread Jukka Tuominen
Hi Andrew and Russ, On Sun, 22 Sep 2013 11:09:38 +0300 (EEST) Jukka Tuominen jukka.tuomi...@finndesign.fi wrote: I'm facing a major challenge. I'm trying to move a populated OpenAFS/Kerberos/OpenLDAP installation under another domain name. The IP address remains the same. Hopefully there

Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Christof Hanke
[added release-team] On Sun, 22 Sep 2013 23:42:55 -0500 Andrew Deason adea...@sinenomine.net wrote: On Sun, 22 Sep 2013 17:51:40 -0700 Russ Allbery r...@stanford.edu wrote: What would people think if I submitted a patch to OpenAFS to rename up to afs-up and backup to afs-backup? Would

Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Christof Hanke
On Mon, 23 Sep 2013 09:19:07 +0200 Christof Hanke christof.ha...@rzg.mpg.de wrote: [added release-team] On Sun, 22 Sep 2013 23:42:55 -0500 Andrew Deason adea...@sinenomine.net wrote: On Sun, 22 Sep 2013 17:51:40 -0700 Russ Allbery r...@stanford.edu wrote: What would people think

Re: [OpenAFS] Naming of backup and up commands

2013-09-23 Thread Feiler
Hello, my answer is YES - we use this commands and YES renaming 'd be fine. If no compat-packages gets provided I'd write/expand my own 'afs-fixit' script. I'd prefer to see the 'afs' prefix rather than a suffix. I think this makes things more easy especially for new people. (type 'afs' and

Re: [OpenAFS] OpenAFS installation messes up Windows 8 file access control

2013-09-23 Thread Jeffrey Altman
On 9/18/2013 8:17 PM, Tim Adye wrote: Hi Jeffrey, Jeffrey Altman jalt...@secure-endpoints.com wrote on 16 September 2013: if you are experiencing undesirable behavior on paths located in the AFS name space then the afs redirectorcan be involved. if the path is local disk or CIFS then the

[OpenAFS] OpenAFS integrated login failed

2013-09-23 Thread Richter, Michael
Hi, we had problems with OpenAFS 1.6.1 crashing on a Windows XP workstation. Eventlog said: - OpenAFS Stopping due to error (cm_scache.c:787): CM_SCACHEFLAG_INHASH set. So I tried to switch to OpenAFS 1.7.26. But now integrated login doesn't work anymore. - Integrated

Re: [OpenAFS] Naming of backup and up commands

2013-09-23 Thread Brandon Allbery
On 9/22/13 20:51, Russ Allbery r...@stanford.edu wrote: Failing that, I'm probably going to split butc, backup, and fms into a separate package to make it easier for other packages to conflict with it due to the poorly-chosen command name instead of conflicting with all of openafs-client.

Re: [OpenAFS] OpenAFS integrated login failed

2013-09-23 Thread Jeffrey Altman
On 9/23/2013 9:13 AM, Richter, Michael wrote: Hi, we had problems with OpenAFS 1.6.1 crashing on a Windows XP workstation. Eventlog said: - OpenAFS Stopping due to error (cm_scache.c:787): CM_SCACHEFLAG_INHASH set. This bug is fixed in 1.7. So I tried to switch to OpenAFS

[OpenAFS] Re: Moving Magic Trio to another domain

2013-09-23 Thread Andrew Deason
On Mon, 23 Sep 2013 09:08:35 +0300 (EEST) Jukka Tuominen jukka.tuomi...@finndesign.fi wrote: For Kerberos, if you're using about MIT or Heimdal, this may be difficult, since usually the keys for user principals are all salted with the realm name. In the past I believe doing this was

Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Russ Allbery
Andrew Deason adea...@sinenomine.net writes: Russ Allbery r...@stanford.edu wrote: What would people think if I submitted a patch to OpenAFS to rename up to afs-up and backup to afs-backup? Would that break a bunch of critical software? It would be really nice to fix AFS's camping on

Re: [OpenAFS] Naming of backup and up commands

2013-09-23 Thread Russ Allbery
Brandon Allbery ballb...@sinenomine.net writes: On 9/22/13 20:51, Russ Allbery r...@stanford.edu wrote: Failing that, I'm probably going to split butc, backup, and fms into a separate package to make it easier for other packages to conflict with it due to the poorly-chosen command name

Re: [OpenAFS] OpenAFS integrated login failed

2013-09-23 Thread Kostas Liakakis
Hi, Could you try 1.7.23 and check if problem exists there as well? I think I am experiencing the same issue as you with versions = 1.7.24 -K. On 09/23/2013 04:13 PM, Richter, Michael wrote: So I tried to switch to OpenAFS 1.7.26. But now integrated login doesn’t work anymore. -Integrated

Re: [OpenAFS release-team] Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Russ Allbery
Christof Hanke christof.ha...@rzg.mpg.de writes: Actually I found on SL6: /usr/bin/pagsh.openafs, so we have now afs-* afs_* and *.openafs as renaming-schemes... This may be a little different. That naming in Debian (which I suspect may be where it came from originally) was because we had

Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread drosih
Maybe have an 'openafs' command, which has all the other commands as sub-commands. Similar to the openssl command. That command would just be a front-end to the other excutables, and then those executables could use whatever naming convention which works best for installation, whether that be

[OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Andrew Deason
On Mon, 23 Sep 2013 09:13:19 -0700 Russ Allbery r...@stanford.edu wrote: Would it be appropriate to also have an optional compat package that could symlink the original names? Yeah, we could do that, I suppose, although it's going to be hard to know when to drop the package. Well, not

Re: [OpenAFS] Re: Moving Magic Trio to another domain

2013-09-23 Thread Jukka Tuominen
On Mon, 23 Sep 2013 09:08:35 +0300 (EEST) Jukka Tuominen jukka.tuomi...@finndesign.fi wrote: For Kerberos, if you're using about MIT or Heimdal, this may be difficult, since usually the keys for user principals are all salted with the realm name. In the past I believe doing this was

Re: [OpenAFS] Re: Moving Magic Trio to another domain

2013-09-23 Thread Jeffrey Altman
On 9/23/2013 3:06 PM, Jukka Tuominen wrote: kadmin.local: ktadd -k /tmp/afs.keytab -norandkey -e des-cbc-crc:normal afs/[server.name]. But that was my earlier attempt (see a few lines below what I did), so it may be different when I follow your suggestions more closely... Please do not

Re: [OpenAFS] Re: Moving Magic Trio to another domain

2013-09-23 Thread Jukka Tuominen
Thanks, I would have missed that! br, jukka On 9/23/2013 3:06 PM, Jukka Tuominen wrote: kadmin.local: ktadd -k /tmp/afs.keytab -norandkey -e des-cbc-crc:normal afs/[server.name]. But that was my earlier attempt (see a few lines below what I did), so it may be different when I follow your

RE: [OpenAFS] OpenAFS installation messes up Windows 8 file access control

2013-09-23 Thread Tim Adye
Hi Jeffrey, Thanks for all the information and hints. I've upgraded from Windows 8 Standard Edition to Pro, but still had the File Explorer bug with OpenAFS. I tried your recipe for disabling the OpenAFS device drivers, but that didn't help either. But then I noticed (in Sysinternal's Process

Re: [OpenAFS] OpenAFS installation messes up Windows 8 file access control

2013-09-23 Thread Jeffrey Altman
On 9/23/2013 8:36 PM, Tim Adye wrote: By several long processes of elimination, I found that afs_shl_ext.dll was being loaded by a registry key: [HKEY_CLASSES_ROOT\Folder\shellex\{00021500---C000-0046}] @={5F820CA1-3DDE-11DB-B2CE-001558092DB5} which autoruns doesn't know

Re: [OpenAFS] Re: Naming of backup and up commands

2013-09-23 Thread Benjamin Kaduk
On Mon, 23 Sep 2013, Russ Allbery wrote: Andrew Deason adea...@sinenomine.net writes: Either way, sure, makes sense to me. But the people that actually use those commands really do need to say something, even if it's just yes, sounds good. Yes, indeed. We use the backup suite here at

[OpenAFS] Re: Moving Magic Trio to another domain

2013-09-23 Thread Andrew Deason
On Mon, 23 Sep 2013 22:06:16 +0300 (EEST) Jukka Tuominen jukka.tuomi...@finndesign.fi wrote: I first tried to dpkg-reconfigure krb server packages so I could introduce the new domain, but it persisted to use the old domain without asking a thing, so I manually replaced all old domains in the